Den tis 22 aug. 2023 kl 13:00 skrev Channakeshavala, Sriharsha via users <
users@subversion.apache.org>:

> Hello,
>
>
>
> Since the “passwd” file stores plain text passwords, it is vulnerable for
> the SVN users.
>
> We have not compiled the subversion 1.14.2 with “cyrus SASL” library and
> hence cannot use SASL authentication mechanisms.
>
>
>
> Could you please suggest any other alternative to secure the passwd file ?
>

The following FAQ article on the Subversion website should probably answer
your questions: https://subversion.apache.org/faq.html#plaintext-passwords

Please note that for Subversion 1.12 until 1.14 the default was to disable
the plaintext password cache. In Subversion 1.15 the plaintext password
cache will again be enabled by default.

Kind regards,
Daniel

Reply via email to